Behavioral task
behavioral1
Sample
77e125f70954089d933bab6a061c0f88_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
77e125f70954089d933bab6a061c0f88_JaffaCakes118.exe
Resource
win10v2004-20240729-en
General
-
Target
77e125f70954089d933bab6a061c0f88_JaffaCakes118
-
Size
2.6MB
-
MD5
77e125f70954089d933bab6a061c0f88
-
SHA1
8f1ff688edd6d759b1b929ba51a746496d414e6b
-
SHA256
c1faee925d20a47338d779e70d5890ee441304a284dd973f449218be19235406
-
SHA512
51cc5cd5344cb441513e462d6a1f629bd74ead4353635e48fd0ad578498770f738643779c8dbfe1704fd767a2994b4d1aec9c0f517bf50afbe2bd8ab44758935
-
SSDEEP
12288:3ZWtI6RkounudyOB0fOmunudyOB0fOmunudyOB0fOmunudyOB0LOmunudyOB0fO9:3uhaAyOwyOwyOwyOeyOwyOwyOwyOc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77e125f70954089d933bab6a061c0f88_JaffaCakes118
Files
-
77e125f70954089d933bab6a061c0f88_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE